---
title: "Security Center for SQL Server Database Engine and Azure SQL Database | Microsoft Docs"
ms.custom: ""
ms.date: "2015-09-23"
ms.prod: "sql-server-2014"
ms.reviewer: ""
ms.suite: ""
ms.technology: 
  - "dbe-security"
ms.tgt_pltfrm: ""
ms.topic: "article"
f1_keywords: 
  - "Security [SQL Server]"
helpviewer_keywords: 
  - "SQL Server, security"
  - "security [SQL Server]"
  - "database security [SQL Server]"
  - "databases [SQL Server], security"
ms.assetid: dfb39d16-722a-4734-94bb-98e61e014ee7
caps.latest.revision: 50
author: "craigg-msft"
ms.author: "craigg"
manager: "jhubbard"
---
# Security Center for SQL Server Database Engine and Azure SQL Database
  This page provides links to help you locate the information that you need about security and protection in the [!INCLUDE[ssDEnoversion](../includes/ssdenoversion-md.md)]and [!INCLUDE[ssSDSfull](../includes/sssdsfull-md.md)].  
  
> [!NOTE]  
>  The capabilities of [!INCLUDE[ssSDSfull](../includes/sssdsfull-md.md)] continue to improve. See the most recent version of this topic for the most recent information about [!INCLUDE[ssSDS](../includes/sssds-md.md)].  
  
|Authentication: Who are you?|Authorization: What can you do?|Encryption: Storing Secret Data|Connection Security: Restricting and Securing|Auditing: Recording Access|  
|----------------------------------|-------------------------------------|-------------------------------------|---------------------------------------------------|--------------------------------|  
|**Who Authenticates?**<br /><br /> [![Security Center Map Windows Authentication](../../2014/database-engine/media/security-center-map-windows-authenticaion.png "Security Center Map Windows Authentication")](http://msdn.microsoft.com/library/ms144284.aspx)<br /><br /> <br /><br /> [![Security Center Map SQL Server Authentication](../../2014/database-engine/media/security-center-map-sql-authenticaion.png "Security Center Map SQL Server Authentication")](http://msdn.microsoft.com/library/ms144284.aspx)<br /><br /> **Where Authenticated?**<br /><br /> [![Security Center Map Logins and Users](../../2014/database-engine/media/security-center-map-logins-users.png "Security Center Map Logins and Users")](http://msdn.microsoft.com/library/aa337562.aspx)<br /><br /> <br /><br /> [![Security Center Map Contained Database Users](../../2014/database-engine/media/security-center-map-contained-users.png "Security Center Map Contained Database Users")](http://msdn.microsoft.com/library/ff929188.aspx)<br /><br /> **Using Other Identities**<br /><br /> [![Security Center Map Credentials](../../2014/database-engine/media/security-center-map-credentials.png "Security Center Map Credentials")](http://msdn.microsoft.com/library/ms161950.aspx)<br /><br /> [![Security Center Map Execute As Login](../../2014/database-engine/media/security-center-map-exec-as-login.png "Security Center Map Execute As Login")](http://msdn.microsoft.com/library/ms181362.aspx)<br /><br /> [![Security Center Map Execute As User](../../2014/database-engine/media/security-center-map-exec-as-user.png "Security Center Map Execute As User")](http://msdn.microsoft.com/library/ms181362.aspx)<br /><br /> ![Placeholder](../../2014/database-engine/media/security-center-map-blankplaceholder.png "Placeholder")<br /><br /> ![Placeholder](../../2014/database-engine/media/security-center-map-blankplaceholder.png "Placeholder")<br /><br /> ![Placeholder](../../2014/database-engine/media/security-center-map-blankplaceholder.png "Placeholder")<br /><br /> ![Placeholder](../../2014/database-engine/media/security-center-map-blankplaceholder.png "Placeholder")|**Granting, Revoking, and Denying Permissions**<br /><br /> [![Security Center Map Securable Classes](../../2014/database-engine/media/security-center-map-securable-classes.png "Security Center Map Securable Classes")](http://msdn.microsoft.com/library/ms190401.aspx)<br /><br /> [![Security Center Map Server Permissions](../../2014/database-engine/media/security-center-map-srv-perms.png "Security Center Map Server Permissions")](http://msdn.microsoft.com/library/ms191291.aspx)<br /><br /> [![Security Center Map Database Permissions](../../2014/database-engine/media/security-center-map-db-perms.png "Security Center Map Database Permissions")](http://msdn.microsoft.com/library/ms191291.aspx)<br /><br /> **Security by Roles**<br /><br /> [![Security Center Map Server Roles](../../2014/database-engine/media/security-center-map-srv-roles.png "Security Center Map Server Roles")](http://msdn.microsoft.com/library/ms188659.aspx)<br /><br /> [![Security Center Map Database Roles](../../2014/database-engine/media/security-center-map-db-roles.png "Security Center Map Database Roles")](http://msdn.microsoft.com/library/ms189121.aspx)<br /><br /> `Restricting Data Access to Selected Data Elements`<br /><br /> [![Security Center Map Views and Procedures](../../2014/database-engine/media/security-center-map-view-procs.png "Security Center Map Views and Procedures")](http://msdn.microsoft.com/library/ms175503.aspx)<br /><br /> [![Security Center Map Row Level Security](../../2014/database-engine/media/security-center-map-row-level-sec.png "Security Center Map Row Level Security")](http://msdn.microsoft.com/library/dn765131.aspx)<br /><br /> [![Security Center Map Dynamic Data Masking](../../2014/database-engine/media/security-center-map-data-masking.png "Security Center Map Dynamic Data Masking")](http://azure.microsoft.com/documentation/articles/sql-database-dynamic-data-masking-get-started/)<br /><br /> [![Security Center Map Signed Objects](../../2014/database-engine/media/security-center-map-signed-objects.png "Security Center Map Signed Objects")](http://msdn.microsoft.com/library/ms181700.aspx)<br /><br /> ![Placeholder](../../2014/database-engine/media/security-center-map-blankplaceholder.png "Placeholder")|**Encrypting Files**<br /><br /> [![Security Center Map BitLocker](../../2014/database-engine/media/security-center-map-bitlocker.png "Security Center Map BitLocker")](http://support.microsoft.com/en-us/kb/2855131)<br /><br /> [![Security Center Map NTFS Encryption](../../2014/database-engine/media/security-center-map-ntfs-encryp.png "Security Center Map NTFS Encryption")](http://msdn.microsoft.com/library/dd163562.aspx)<br /><br /> [![Security Center Map TDE](../../2014/database-engine/media/security-center-map-tde.png "Security Center Map TDE")](http://msdn.microsoft.com/library/bb934049.aspx)<br /><br /> [![Security Center Map Backup Encryption](../../2014/database-engine/media/security-center-map-backup-encryp.png "Security Center Map Backup Encryption")](http://msdn.microsoft.com/library/dn449489.aspx)<br /><br /> **Encrypting Sources**<br /><br /> [![Security Center Map EKM](../../2014/database-engine/media/security-center-map-ekm.png "Security Center Map EKM")](http://msdn.microsoft.com/library/bb895340.aspx)<br /><br /> [![Security Center Map Azure Key Vault](../../2014/database-engine/media/security-center-map-key-vault.png "Security Center Map Azure Key Vault")](http://azure.microsoft.com/documentation/articles/key-vault-get-started/)<br /><br /> **Column, Data & Key Encryption**<br /><br /> [![Security Center Map Encrypt by Certificate](../../2014/database-engine/media/security-center-map-cert.png "Security Center Map Encrypt by Certificate")](http://msdn.microsoft.com/library/ms188061.aspx)<br /><br /> [![Security Center Map Encrypt by Symmetric Key](../../2014/database-engine/media/security-center-map-sym-key.png "Security Center Map Encrypt by Symmetric Key")](http://msdn.microsoft.com/library/ms174361.aspx)<br /><br /> [![Security Center Map Encrypt by Asymmetric Key](../../2014/database-engine/media/security-center-map-asym-key.png "Security Center Map Encrypt by Asymmetric Key")](http://msdn.microsoft.com/library/ms186950.aspx)<br /><br /> [![Security Center Map Encrypt by Passphrase](../../2014/database-engine/media/security-center-map-passphrase.png "Security Center Map Encrypt by Passphrase")](http://msdn.microsoft.com/library/ms190357.aspx)|**Firewall Protection**<br /><br /> [![Security Center Map Windows Firewall](../../2014/database-engine/media/security-center-map-windows-firewall.png "Security Center Map Windows Firewall")](http://msdn.microsoft.com/library/ms175043.aspx)<br /><br /> [![Security Center Map Service Firewall](../../2014/database-engine/media/security-center-map-service-firewall.png "Security Center Map Service Firewall")](http://msdn.microsoft.com/library/azure/ee621782.aspx)<br /><br /> [![Security Center Map Database Firewall](../../2014/database-engine/media/security-center-map-db-firewall.png "Security Center Map Database Firewall")](http://msdn.microsoft.com/library/azure/ee621782.aspx)<br /><br /> **Encrypting Data in Transit**<br /><br /> [![Security Center Map Forced SSL](../../2014/database-engine/media/security-center-map-forced-ssl.png "Security Center Map Forced SSL")](http://msdn.microsoft.com/library/ms191192.aspx)<br /><br /> [![Security Center Map Optional SSL](../../2014/database-engine/media/security-center-map-opt-ssl.png "Security Center Map Optional SSL")](http://msdn.microsoft.com/library/ms191192.aspx)<br /><br /> ![Placeholder](../../2014/database-engine/media/security-center-map-blankplaceholder.png "Placeholder")<br /><br /> ![Placeholder](../../2014/database-engine/media/security-center-map-blankplaceholder.png "Placeholder")<br /><br /> ![Placeholder](../../2014/database-engine/media/security-center-map-blankplaceholder.png "Placeholder")<br /><br /> ![Placeholder](../../2014/database-engine/media/security-center-map-blankplaceholder.png "Placeholder")<br /><br /> ![Placeholder](../../2014/database-engine/media/security-center-map-blankplaceholder.png "Placeholder")<br /><br /> ![Placeholder](../../2014/database-engine/media/security-center-map-blankplaceholder.png "Placeholder")<br /><br /> ![Placeholder](../../2014/database-engine/media/security-center-map-blankplaceholder.png "Placeholder")|**Automated Auditing**<br /><br /> [![Security Center Map SQL Server Audit](../../2014/database-engine/media/security-center-map-sql-audit.png "Security Center Map SQL Server Audit")](http://msdn.microsoft.com/library/cc280386.aspx)<br /><br /> [![Security Center Map SQL Database Audit](../../2014/database-engine/media/security-center-map-sqldb-audit.png "Security Center Map SQL Database Audit")](http://azure.microsoft.com/documentation/articles/sql-database-auditing-get-started/)<br /><br /> **Custom Audit**<br /><br /> ![Placeholder](../../2014/database-engine/media/security-center-map-blankplaceholder.png "Placeholder")<br /><br /> [![Security Center Map Triggers](../../2014/database-engine/media/security-center-map-triggers.png "Security Center Map Triggers")](http://msdn.microsoft.com/library/ms175941.aspx)<br /><br /> **Compliance**<br /><br /> [![SecCtrCompliance](../../2014/database-engine/media/secctrcompliance.png "SecCtrCompliance")](http://azure.microsoft.com/support/trust-center/services/)<br /><br /> ![Placeholder](../../2014/database-engine/media/security-center-map-blankplaceholder.png "Placeholder")<br /><br /> ![Placeholder](../../2014/database-engine/media/security-center-map-blankplaceholder.png "Placeholder")<br /><br /> ![Placeholder](../../2014/database-engine/media/security-center-map-blankplaceholder.png "Placeholder")<br /><br /> ![Placeholder](../../2014/database-engine/media/security-center-map-blankplaceholder.png "Placeholder")<br /><br /> ![Placeholder](../../2014/database-engine/media/security-center-map-blankplaceholder.png "Placeholder")<br /><br /> ![Security Center Legend](../../2014/database-engine/media/security-center-map-legend.png "Security Center Legend")|  
  
## Links to Specific Related Topics  
 ![Small File Folder Icon](../../2014/integration-services/media/filefolder-small.gif "Small File Folder Icon") **Authentication: Who are you?**  
 **Who Authenticates? (Windows or [!INCLUDE[ssNoVersion](../includes/ssnoversion-md.md)])**  
  
-   [Choose an Authentication Mode](../../2014/database-engine/choose-an-authentication-mode.md)  
  
 **Authenticate at the master database** (Logins and database users)  
  
-   [Create a SQL Server Login](../../2014/database-engine/create-a-login.md)  
  
-   [Managing Databases and Logins in Azure SQL Database](http://msdn.microsoft.com/library/ee336235.aspx)  
  
-   [Create a Database User](../../2014/database-engine/create-a-database-user.md)  
  
 **Authenticate at a user database**  
  
-   [Contained Database Users - Making Your Database Portable](../../2014/database-engine/contained-database-users-making-your-database-portable.md)  
  
 **Using Other Identities**  
  
-   [Credentials &#40;Database Engine&#41;](../../2014/database-engine/credentials-database-engine.md)  
  
-   [Execute as Another Login](~/t-sql/statements/execute-as-transact-sql.md)  
  
-   [Execute as Another Database User](~/t-sql/statements/execute-as-transact-sql.md)  
  
 ![Small File Folder Icon](../../2014/integration-services/media/filefolder-small.gif "Small File Folder Icon") **Encryption: Storing Secret Data**  
 **Encrypting Files**  
  
-   [BitLocker (Drive Level)](http://support.microsoft.com/kb/2855131)  
  
-   [NTFS Encryption (Folder Level)](http://msdn.microsoft.com/library/dd163562.aspx)  
  
-   [Transparent Data Encryption (File Level)](../../2014/database-engine/transparent-data-encryption-tde.md)  
  
-   [Backup Encryption (File Level)](../../2014/database-engine/backup-encryption.md)  
  
 **Encrypting Sources**  
  
-   [Extensible Key Management Module](../../2014/database-engine/extensible-key-management-ekm.md)  
  
-   [Keys Stored in the Azure Key Vault](../../2014/database-engine/extensible-key-management-using-azure-key-vault-sql-server.md)  
  
 **Column, Data and Key Encryption**  
  
-   [Encrypt by Certificate](~/t-sql/functions/encryptbycert-transact-sql.md)  
  
-   [Encrypt by Asymmetric Key](~/t-sql/functions/encryptbyasymkey-transact-sql.md)  
  
-   [Encrypt by Symmetric Key](~/t-sql/functions/encryptbykey-transact-sql.md)  
  
-   [Encrypt by Passphrase](~/t-sql/functions/encryptbypassphrase-transact-sql.md)  
  
 ![Small File Folder Icon](../../2014/integration-services/media/filefolder-small.gif "Small File Folder Icon") **Authorization: What can you do?**  
 **Granting, Revoking, and Denying Permissions**  
  
-   [Permissions Hierarchy &#40;Database Engine&#41;](../../2014/database-engine/permissions-hierarchy-database-engine.md)  
  
-   [Permissions](../../2014/database-engine/permissions-database-engine.md)  
  
-   [Securables](../../2014/database-engine/securables.md)  
  
 **Security by Roles**  
  
-   [Server-Level Roles](../../2014/database-engine/server-level-roles.md)  
  
-   [Database-Level Roles](../../2014/database-engine/database-level-roles.md)  
  
 `Restricting Data Access to Selected Data Elements`  
  
-   Restrict Data Access Using [Views](../../2014/database-engine/views.md) and [Procedures](../../2014/database-engine/stored-procedures-database-engine.md)  
  
-   [Row-Level Security](http://msdn.microsoft.com/library/azure/dn765131.aspx)  
  
-   [Dynamic Data Masking](http://azure.microsoft.com/documentation/articles/sql-database-dynamic-data-masking-get-started/)  
  
-   [Signed Objects](~\t-sql\statements\add-signature-transact-sql.md)  
  
 ![Small File Folder Icon](../../2014/integration-services/media/filefolder-small.gif "Small File Folder Icon") **Connection Security: Restricting and Securing**  
 **Firewall Protection**  
  
-   [Configure a Windows Firewall for Database Engine Access](configure-windows/configure-a-windows-firewall-for-database-engine-access.md)  
  
-   [Azure SQL Database Firewall Settings](~/relational-databases/system-stored-procedures/sp-set-database-firewall-rule-azure-sql-database.md)  
  
-   [Azure Service Firewall Settings](~/relational-databases/system-stored-procedures/sp-set-firewall-rule-azure-sql-database.md)  
  
 **Encrypting Data in Transit**  
  
-   [Secure Sockets Layer for the Database Engine](configure-windows/enable-encrypted-connections-to-the-database-engine.md)  
  
-   [Secure Sockets Layer for SQL Database](https://msdn.microsoft.com/library/azure/ff394108.aspx)  
  
 ![Small File Folder Icon](../../2014/integration-services/media/filefolder-small.gif "Small File Folder Icon") **Auditing: Recording Access**  
 **Automated Auditing**  
  
-   [SQL Server Audit &#40;Database Engine&#41;](../../2014/database-engine/sql-server-audit-database-engine.md)  
  
-   [SQL Database Auditing](http://azure.microsoft.com/documentation/articles/sql-database-auditing-get-started/)  
  
 **Custom Audit Implementation**  
  
-   Creating [DDL Triggers](../../2014/database-engine/ddl-triggers.md) and [DML Triggers](../../2014/database-engine/dml-triggers.md)  
  
 ![Small File Folder Icon](../../2014/integration-services/media/filefolder-small.gif "Small File Folder Icon") **Compliance**  
 **SQL Server**  
  
-   [Common Criteria](http://go.microsoft.com/fwlink/?LinkId=616319)  
  
 **SQL Database**  
  
-   [Microsoft Azure Trust Center: Compliance by Feature](http://azure.microsoft.com/support/trust-center/services/)  
  
## See Also  
 [Securing SQL Server](../../2014/database-engine/securing-sql-server.md)   
 [Principals &#40;Database Engine&#41;](../../2014/database-engine/principals-database-engine.md)   
 [SQL Server Certificates and Asymmetric Keys](../../2014/database-engine/sql-server-certificates-and-asymmetric-keys.md)   
 [SQL Server Encryption](../../2014/database-engine/sql-server-encryption.md)   
 [Surface Area Configuration](../../2014/database-engine/surface-area-configuration.md)   
 [Strong Passwords](../../2014/database-engine/strong-passwords.md)   
 [TRUSTWORTHY Database Property](../../2014/database-engine/trustworthy-database-property.md)   
 [Database Engine Features and Tasks](../../2014/database-engine/database-engine-features-and-tasks.md)